A new Go-based botnet malware named 'GoTrim' is scanning the web for self-hosted WordPress websites and attempting to brute force the administrator's password and take control of the site. This ...

A new malware has been posing as a legitimate caching plugin to target WordPress sites, allowing threat actors to create an administrator account and control the site's activity. The malware is a ...

Thousands of WordPress sites could be at risk as a vulnerability in the Ultimate Member plugin gets exploited, but a quick fix will stop your site from being taken over. The plugin, which has amassed ...

Joost de Valk calls out the disorganized state of the WordPress UI and encourages devoting more resources to modernizing it Joost de Valk writes that the lack of a unified design system contributes to ...

Katherine Haan, MBA, is a Senior Staff Writer for Forbes Advisor and a former financial advisor turned international bestselling author and business coach. For more than a decade, she’s helped small ...

A vulnerability in WordPress 2.8.3 which allows anyone to lock an admin out of his or her account by resetting the password has been reported. “The bug … is trivial to exploit remotely using nothing ...

A new website called WP Engine Tracker shows how many sites have moved away from hosting provider WP Engine since the company’s feud with WordPress co-creator Matt Mullenweg began in September.